CVS commit: pkgsrc/www/apache24

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Jan 24 08:57:05 UTC 2025

Modified Files:
        pkgsrc/www/apache24: Makefile PLIST distinfo

Log Message:
apache24: updated to 2.4.63

Changes with Apache 2.4.63

*) mod_dav: Update redirect-carefully example BrowserMatch config
   to match more recent client versions.

*) mod_cache_socache: Fix possible crash on error path.

*) mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.

*) mod_md: update to version 2.4.31
   - Improved error reporting when waiting for ACME server to verify domains
     or finalizing the order fails, e.g. times out.
   - Increasing the timeouts to wait for ACME server to verify domain names
     and issue the certificate from 30 seconds to 5 minutes.
   - Change a log level from error to debug when Stapling is enabled but a
     certificate carries no OCSP responder URL.

*) mod_proxy_balancer: Fix the handling of the stickysession configuration
   parameter by the balancer manager.

*) Add the ldap-search option to mod_authnz_ldap, allowing authorization
   to be based on arbitrary expressions that do not include the username.
   Make sure that when ldap searches are too long, we explicitly log the
   error.

*) mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
   in the host name or port.

*) mod_log_config: Fix merging for the "LogFormat" directive.

*) mod_lua: Make r.ap_auth_type writable.

*) mod_md: update to version 2.4.29
   - Fixed HTTP-01 challenges to not carry a final newline, as some ACME
     server fail to ignore it.
   - Fixed missing label+newline in server-status plain text output when
     MDStapling is enabled.

*) mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
   without "SSLCryptoDevice" configured.

*) mod_authnz_ldap: Fix possible memory corruption if the
   AuthLDAPSubGroupAttribute directive is configured.

*) mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.

*) mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten
   including "unix:" ones.

*) mod_rewrite: Error out in case a RewriteRule in directory context uses the
   proxy, but mod_proxy is not loaded.

*) http: Remove support for Request-Range header sent by Navigator 2-3 and
   MSIE 3.

*) mod_rewrite: Don't require
   added by applying the perdir prefix to the substitution.

*) Windows: Restore the ability to "Include" configuration files on UNC
   paths.

*) mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
   in <Location> (incomplete fix in 2.4.62).

*) mod_md: update to version 2.4.28
   - When the server starts, it looks for new, staged certificates to
     activate. If the staged set of files in 'md/staging/<domain>' is messed
     up, this could prevent further renewals to happen. Now, when the staging
     set is present, but could not be activated due to an error, purge the
     whole directory.
   - Fix certificate retrieval on ACME renewal to not require a 'Location:'
     header returned by the ACME CA. This was the way it was done in ACME
     before it became an IETF standard. Let's Encrypt still supports this,
     but other CAs do not.
   - Restore compatibility with OpenSSL < 1.1.

*) mod_tls: removed the experimental module. It now is availble standalone
   from https://github.com/icing/mod_tls. The rustls provided API is not
   stable and does not align with the httpd release cycle.

*) mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.

*) mod_http2: Return connection monitoring to the event MPM when blocking
   on client updates.


To generate a diff of this commit:
cvs rdiff -u -r1.132 -r1.133 pkgsrc/www/apache24/Makefile
cvs rdiff -u -r1.36 -r1.37 pkgsrc/www/apache24/PLIST
cvs rdiff -u -r1.65 -r1.66 pkgsrc/www/apache24/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/apache24/Makefile
diff -u pkgsrc/www/apache24/Makefile:1.132 pkgsrc/www/apache24/Makefile:1.133
--- pkgsrc/www/apache24/Makefile:1.132  Thu Nov 14 22:22:02 2024
+++ pkgsrc/www/apache24/Makefile        Fri Jan 24 08:57:05 2025
@@ -1,13 +1,12 @@
-# $NetBSD: Makefile,v 1.132 2024/11/14 22:22:02 wiz Exp $
+# $NetBSD: Makefile,v 1.133 2025/01/24 08:57:05 adam Exp $
 #
 # When updating this package, make sure that no strings like
 # "PR 12345" are in the commit message. Upstream likes
 # to reference their own PRs this way, but this ends up
 # in NetBSD GNATS.
 
-DISTNAME=      httpd-2.4.62
+DISTNAME=      httpd-2.4.63
 PKGNAME=       ${DISTNAME:S/httpd/apache/}
-PKGREVISION=   3
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_APACHE:=httpd/}
 EXTRACT_SUFX=  .tar.bz2

Index: pkgsrc/www/apache24/PLIST
diff -u pkgsrc/www/apache24/PLIST:1.36 pkgsrc/www/apache24/PLIST:1.37
--- pkgsrc/www/apache24/PLIST:1.36      Fri Jan 20 14:03:16 2023
+++ pkgsrc/www/apache24/PLIST   Fri Jan 24 08:57:05 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.36 2023/01/20 14:03:16 adam Exp $
+@comment $NetBSD: PLIST,v 1.37 2025/01/24 08:57:05 adam Exp $
 bin/ab
 bin/apxs
 bin/dbmmanage
@@ -1257,8 +1257,6 @@ share/httpd/manual/mod/mod_suexec.html.t
 share/httpd/manual/mod/mod_systemd.html
 share/httpd/manual/mod/mod_systemd.html.en
 share/httpd/manual/mod/mod_systemd.html.fr.utf8
-share/httpd/manual/mod/mod_tls.html
-share/httpd/manual/mod/mod_tls.html.en
 share/httpd/manual/mod/mod_unique_id.html
 share/httpd/manual/mod/mod_unique_id.html.en
 share/httpd/manual/mod/mod_unique_id.html.fr.utf8

Index: pkgsrc/www/apache24/distinfo
diff -u pkgsrc/www/apache24/distinfo:1.65 pkgsrc/www/apache24/distinfo:1.66
--- pkgsrc/www/apache24/distinfo:1.65   Wed Jul 17 19:02:01 2024
+++ pkgsrc/www/apache24/distinfo        Fri Jan 24 08:57:05 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.65 2024/07/17 19:02:01 wiz Exp $
+$NetBSD: distinfo,v 1.66 2025/01/24 08:57:05 adam Exp $
 
-BLAKE2s (httpd-2.4.62.tar.bz2) = a887a0baf8c1861f68a6251d2f03ced0318615c484eaf5f304e935177aa602a0
-SHA512 (httpd-2.4.62.tar.bz2) = 7db1876805d5c0f60f49bcb51f75cdf567120f2ff6349e68f084e9a86ae38265d9f1c67e7fca0082c9db136f3c408a88501ee11f26b1b68724ba240867171d77
-Size (httpd-2.4.62.tar.bz2) = 7521661 bytes
+BLAKE2s (httpd-2.4.63.tar.bz2) = 8a0d09d2a0b8f32aaac1927fd519e843e826a69a6b4bbeff91c88e73bb7f4a95
+SHA512 (httpd-2.4.63.tar.bz2) = a804ca564dfee5907fe4ce4f36884815bace0621bc7b8c9aa7c99472a954aa19cb13733f90678ff3d58ab3c76cc0e33a27e1035dc1d8cb597a9622154c59ef48
+Size (httpd-2.4.63.tar.bz2) = 7517972 bytes
 SHA1 (patch-aa) = 9a66685f1d2e4710ab464beda98cbaad632aebf9
 SHA1 (patch-ab) = a3edcc20b7654e0446c7d442cda1510b23e5d324
 SHA1 (patch-ad) = 4ba4a9c812951f533fa316e5dbf17eaab5494157